Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa
File:                     4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa (raw, json)
Hash identifier:          +r4BU4sNFYWzTfsJgHLqcvQp/TvAiHrSYi0Kp9QfwMA=
Subject key identifier:   01:2D:39:F3:0D:97:E3:23:1F:08:8A:8C:2E:C6:24:0B:35:E7:54:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D839A99CBE3690437B17CCCCA222D22D6C9F8D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa
Signing time:             Sun 16 Nov 2025 00:11:05 +0000
ROA not before:           Sun 16 Nov 2025 00:11:05 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        203.110.206.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:83:9a:99:cb:e3:69:04:37:b1:7c:cc:ca:22:2d:22:d6:c9:f8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 16 00:11:05 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=34b78a2491a134fe7f1c1a57723986332446631f3df045022962013401cb5431, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:9b:9e:a2:56:62:a7:bb:b0:68:b6:38:44:
                    40:25:9f:1d:93:6c:29:d3:44:70:be:ba:87:19:b3:
                    f1:b7:d6:a6:43:38:30:8e:0c:d5:27:0f:9a:ba:08:
                    ff:72:08:21:be:2c:a1:3b:24:f2:99:ed:e0:ae:43:
                    be:ff:ad:5d:4c:dd:68:2d:26:19:69:d2:e1:43:2b:
                    95:cc:80:24:bc:78:9e:3e:06:e8:21:e1:b9:18:d1:
                    4c:19:90:f2:c4:64:ab:e4:c1:3d:5d:89:f3:4a:c2:
                    85:32:ed:73:5a:ac:ac:c1:f5:5f:90:c9:ad:2d:54:
                    5d:f9:4f:f1:cb:cd:8b:3d:cf:44:15:56:3f:0a:a4:
                    3f:dc:b5:b1:d6:30:77:f6:32:85:12:7c:77:54:8a:
                    f7:3a:c8:19:0d:78:a6:0c:ba:b4:cf:bc:38:7b:67:
                    b8:e9:dc:58:51:25:ac:de:89:88:d3:3d:8e:7e:d7:
                    5f:61:68:7f:a6:db:37:54:f0:a2:8b:5d:f0:4e:ab:
                    88:a5:ea:63:79:81:8a:f2:7e:89:b0:c5:af:65:98:
                    79:2e:22:04:72:27:7f:4d:a4:91:e0:1f:5d:2e:1f:
                    e9:f9:29:c3:76:0a:ef:ec:68:b5:e9:e0:6c:69:4b:
                    24:da:39:3f:4d:7c:db:59:d2:10:04:df:e8:d1:b6:
                    5a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2D:39:F3:0D:97:E3:23:1F:08:8A:8C:2E:C6:24:0B:35:E7:54:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.110.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:96:b3:30:c7:98:24:c9:af:0b:13:70:76:df:e0:b8:5c:60:
         b0:76:70:61:18:74:e8:c3:0f:e5:8d:5b:c9:e4:d3:ff:82:e9:
         b3:c7:be:59:4a:c4:14:ea:75:70:d6:dd:54:d9:1b:21:44:2f:
         b4:e8:f5:41:fb:4d:ae:8e:32:66:82:fb:ad:65:1b:c5:b9:ff:
         ed:ed:cd:ab:44:b6:3b:05:df:01:e8:af:0c:ca:ca:86:47:99:
         0f:bc:46:f9:fb:21:4f:56:dd:83:95:d4:a8:f0:06:fc:9c:42:
         52:0f:b6:d0:44:8c:22:09:b0:ab:9f:fc:7c:14:9c:e6:5d:e4:
         97:dc:b8:d4:4e:1b:7f:c8:d2:2d:2b:da:2d:ff:24:cf:63:84:
         11:5d:1e:06:13:0b:2f:0c:8b:19:e7:d5:e3:2e:0f:c1:d1:6f:
         95:dd:ee:f3:6c:e6:21:a0:f3:0a:e3:9e:88:39:81:a1:a0:4f:
         b9:92:bb:56:1a:0a:61:12:93:79:a6:c3:51:61:4a:e0:78:01:
         59:3c:f0:1e:45:f2:a1:e7:97:76:8f:85:f4:7f:42:33:20:f7:
         21:ff:27:0f:05:db:d5:ca:8d:6f:64:6e:12:ad:04:fe:c1:3f:
         68:d5:68:6f:26:5f:f3:1a:be:86:33:eb:57:4f:a9:10:02:f5:
         95:02:06:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----